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CLAIMS 

1. A method of universal calculation on points on 
5 an elliptic curve, characterised in that the elliptic 

curve is defined by a quartic equation and in that 
identical programmed calculation means are used to 
carry out an operation of addition of points, an 
operation of doubling of points, and an operation of 
10 addition of a neutral point, the calculation means 
comprising in particular a central processing unit (2) 
associated with a memory (4, 6, 8). 

2. A method according to Claim 1, characterised 
15 in that the elliptic curve is defined by a quartic 

equation of the type: 

V 2 = b.U 4 + a.U 3 W + UW 3 , 

20 (U : V : W) being Jacobi projective coordinates 

of a point P on the elliptic curve, and a, b being 
parameters of the elliptic curve, a point with 
coordinates (0:0:1) being a neutral point O of the 
elliptic curve, a point with coordinates (U : -V : W) 

25 being an inverse point (-P) of the point P with 
coordinates (U : V : W) . 
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3. A method according to Claim 2, in which the 
point P is also defined in af fine coordinates (X, Y) , 
the affine coordinates (X, Y) and the Jacobi projective 
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coordinates (U : V : W) of the point P being linked by 
the relationships : 

(X, Y) = (U/W, V/W 2 ) . 

5 

4. A method according to Claim 2 or 3, in which, 
in order to carry out the addition of a first point PI 
defined by first Jacobi projective coordinates (Ul : VI 
: Wl) and a second point P2 defined by second Jacobi 
10 projective coordinates (U2 : V2 : W2) , the coordinates 
of the first point PI and those of the second point P2 
being stored in first and second registers in the 
memory (4, 6, 8), the first point and the second point 
belonging to the elliptic curve, 

15 

the programmed calculation means calculate third 
Jacobi projective coordinates (U3 : V3 : W3) defining a 
third point P3, the result of the addition, by the 
following equations : 

20 

U3 = 2.b.Ul 2 .U2 2 

+ (aUl.U2 + W1.W2) . (U1.W2+W1.U2) + 

2V1.V2 

25 V3 = (Ul 2 . V2+U2 2 . VI) * 

(4b. (U1.W2+U2.W1) .W1.W2 
- 8b 2 . (U1.U2) 2 

+ a.[(2Wl.W2) 2 - (aUl.U2+Wl.W2) 2 ] 
+ (Wl 2 . V2+W2 2 . VI) * 
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[ (aUl.U2+Wl.W2) 2 -(2aUl.U2) 2 + 
4bUl.U2. (W1.U2+U1.W2) ] 

- 4bUl.U2. (U1.W1.V2+U2.W2.V1) (aUl . U2-W1 . W2) 

5 W3 = (aUl.U2-Wl.W2) 2 - 4bUl . U2 (01 . W2+U2 . Wl ) 

and then store the third projective coordinates 
(U3 : V3 : W3) in third registers in the memory (6, 8). 

10 5. A method according to Claim 1, in which the 

elliptic curve is a curve comprising a single point of 
order two and is defined by a quartic equation of the 
type : 

15 V 2 = s.U 4 - 25.U 2 .W 2 + W\ 

(U : V : W) being Jacobi projective coordinates 
of a point P on the elliptic curve, and s, 5 being 
parameters of the elliptic curve, the point with 
20 coordinates (0:1:1) being the neutral point O of 
the elliptic curve, the point with coordinates (-U : +V 
: W) being the inverse point (-P) of the point P (U : V 
: W) . 

25 6. A method according to Claim 5, in which, in 

order to carry out the addition of the first point PI 
defined by first Jacobi projective coordinates (Ul : VI 
: Wl) and the second point P2 defined by second Jacobi 
projective coordinates (U2 : V2 : W2) , the coordinates 

30 of the first point PI and those of the second point P2 
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being stored in first and second registers in the 
memory (4, 6, 8), the first point and the second point 
belonging to the elliptic curve, 

the programmed calculation means calculate third 
Jacobi projective coordinates (U3 : V3 : W3) defining a 
third point P3, the result of the addition, by the 
following equations : 

U3 = U1.W1.V2 + V1.U2.W2 

V3 = [(W1.W2) 2 + s(Ul.U2) 2 ] 
* [VI . V2- 

28U1.U2.W1.W2] +2s.Ul.U2 .Wl .W2 (U1 2 W2 2 +W1 2 U2 2 ) 
W3 = (W1.W2) 2 - 8(U1.U2) 2 

and then store the third projective coordinates 
(U3 : V3 : W3) in the third registers in the memory (6, 
8) . 

7. A method according to one of Claims 5 to 6, in 
which the elliptic curve is defined in affine 
coordinates by an equation of the type: 

Y 2 = s.X 4 - 25.X 2 + 1 

(X, Y) being affine coordinates of a point P on 
the elliptic curve. 
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8. A method according to Claim 7, in which, in 
order to carry out the addition of the first point PI 
defined by first affine coordinates (XI, Yl) and the 
5 second point P2 defined by second affine coordinates 
(X2, Y2) , the coordinates of the first point PI and 
those of the second point P2 being stored in first and 
second registers in the memory (4, 6, 8), the first 
point PI and the second point P2 belonging to the 
10 elliptic curve, 

the programmed calculation means calculate third 
affine coordinates (X3, Y3) defining a third point P3, 
the result of the addition, by the following equations: 

15 

X3 = (XI. Y2 + Y1.X2)/[1 - s(Xl.X2) 2 ] 

Y3 = { [l+s(Xl.X2) 2 ] . [Y1.Y2 

28.Xl.X2]+2e.Xl.X2. (Xl 2 +X2 2 ) } 
20 / [1 - s(Xl.X2) 2 ] 

and then store the third affine coordinates (X3, 
Y3) in the third registers in the memory (6, 8). 

25 9. A method according to one of Claims 5 to 8, in 

which the elliptic curve is a curve comprising three 
points of order two and has 8 = 1 as a parameter. 
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10. Use of a calculation method according to one 
of Claims 1 to 9 in a scalar multiplication calculation 
method applied to points on an elliptic curve. 

5 11. Use of a calculation method according to one 

of Claims 1 to 9 in a cryptographic method. 

12. An electronic component comprising programmed 
calculation means for implementing a method according 

10 to one of Claims 1 to 9, the calculation means 
comprising in particular a central processing unit (2) 
associated with a memory (4, 6, 8). 

13. An electronic component comprising means for 
15 implementing a cryptographic algorithm using a method 

according to one of Claims 1 to 9. 



14. A smart card comprising an electronic 
component according to Claim 12 or 13. 
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